Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa
File: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (raw, json)
Hash identifier: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=
Subject key identifier: 7B:4B:01:11:77:3F:5D:E9:29:76:B3:4C:25:52:29:FC:F9:77:48:16
Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial: 019421B17505E3794AA09AF2C6C05A52A772
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa
Signing time: Wed 01 Jan 2025 11:47:45 +0000
ROA not before: Wed 01 Jan 2025 11:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25413
IP address blocks: 146.106.0.0/16 maxlen: 24
194.105.120.0/21 maxlen: 24
194.156.12.0/22 maxlen: 24
2a0d:c40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:75:05:e3:79:4a:a0:9a:f2:c6:c0:5a:52:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Validity
Not Before: Jan 1 11:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b4b0111773f5de92976b34c255229fcf9774816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:85:cc:79:bf:44:42:e2:7d:1f:b7:c1:47:
97:05:68:7f:fa:d6:66:e8:71:0f:29:ea:e2:4b:8a:
bb:98:4b:54:7d:47:0b:36:93:04:01:1f:4f:ff:61:
8d:f6:5d:f9:5f:71:8c:55:b3:ee:61:99:81:8b:e5:
0f:4f:7d:56:f4:37:56:e6:10:0a:c8:1e:d5:04:f4:
bc:b3:d2:b1:be:fd:d7:de:74:5e:21:18:b8:72:4e:
ef:b2:2f:25:21:98:2a:ef:b0:54:d7:95:89:dc:60:
29:d3:a9:f1:3c:ab:31:f9:25:83:d3:18:2a:41:1c:
52:1b:92:73:69:5a:84:3a:cd:d0:0b:4c:60:06:36:
16:b5:ee:6d:2b:47:fa:25:99:38:34:34:04:fb:c3:
84:ca:be:53:03:08:46:30:0c:76:d9:14:19:fc:0a:
b6:0e:40:93:e4:a1:6b:84:f7:cf:c4:65:e3:c6:16:
45:34:52:ce:cd:69:8e:7c:e6:f9:70:a5:84:db:39:
51:cc:fb:99:49:77:c6:2d:53:41:95:41:58:64:c0:
98:85:29:3c:1b:32:0b:29:ea:4c:13:83:0f:db:66:
a9:98:a3:92:88:42:ce:81:b7:9e:8d:d4:0d:cf:e0:
13:85:c2:34:90:b9:44:64:c7:11:94:df:99:0c:cc:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:01:11:77:3F:5D:E9:29:76:B3:4C:25:52:29:FC:F9:77:48:16
X509v3 Authority Key Identifier:
keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.106.0.0/16
194.105.120.0/21
194.156.12.0/22
IPv6:
2a0d:c40::/29
Signature Algorithm: sha256WithRSAEncryption
3e:19:72:f4:36:06:a9:c0:c0:e2:10:9a:65:b7:6d:9f:89:f4:
9e:9d:03:d4:91:c7:f3:4f:ed:2d:0c:12:a7:6e:d5:4f:91:b6:
11:e6:5e:eb:e6:23:d2:61:ec:05:4b:93:81:37:a5:aa:3b:29:
6f:93:60:41:8c:00:50:68:6b:0f:ed:88:09:34:8c:21:65:9d:
6d:bb:d4:93:b0:da:15:79:58:60:a2:c8:68:01:13:59:ae:7a:
b3:88:7d:fd:93:e6:ac:60:40:c9:32:fd:16:2d:85:ce:81:3e:
7a:21:5b:79:ca:20:d5:2c:a5:6d:4b:89:0a:ce:e1:02:d2:ad:
b7:07:e2:0e:72:cf:ad:2c:12:ce:b2:96:54:5f:7f:e9:d6:c6:
11:cd:73:57:cf:0d:0f:7f:af:a9:6f:17:54:d6:a3:74:f0:80:
7f:5d:35:3a:ca:21:fb:50:e1:64:a9:88:ee:69:31:71:c0:b4:
b1:60:a9:83:74:f2:b9:41:19:6f:69:ac:ae:25:97:46:c3:6e:
88:9e:70:18:58:48:55:d4:fa:4a:35:5c:31:3a:74:83:65:3b:
7c:88:f6:60:f3:f2:f8:e7:a8:32:4d:60:58:9e:3c:59:16:4f:
ab:cd:d2:ac:9a:4d:9e:e3:b0:24:43:33:da:18:25:fe:2a:8a:
c0:c2:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net